• Anonymize all personal data (name, phone, email)
• Invalidate the hotel PIN (login disabled)
• Hide the public menu page
• Mark hotel for permanent purge after 180 days

Menu data and images are preserved until purge.

• Delete ALL categories and menu items
• Delete ALL images from cloud storage (R2)
• Delete ALL audit logs for this hotel
• Remove the hotel record permanently
• Free up the menu code (slug) for reuse

This cannot be undone. Data is gone forever.